Submit login information via AJAX

Question

Im using jQuery validate plugin and each form has several levels of validation.

• Level
• is the validate level plugin
• :
  • data is sent to the site
  • I get an answer
    • if everything is ok -> JS redirects the url
    • if there is an error, it shows warnings

Now I wonder if it is safe to send login data via ajax? I know that with add-ons like firebug, I can also get all the POST parameters with the usual feed. But can someone else interfere with the ajax request for login and steal precious data?

Answer 1

securely send login information via ajax

HTTPS, ? , .

Answer 2

HTTPS?

Answer 3

- , . HTTP-.

If you mean "can someone insert something on the page and steal the data," the answer is yes. As you noticed, the user can install plugins that can do this; it is also possible that your page may be inadvertently targeted for injection via crossite scripting or some other flaw.